Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/BrIhz2KH_vM4WIq2N53pV91cJ44.roa
File: BrIhz2KH_vM4WIq2N53pV91cJ44.roa (raw, json)
Hash identifier: Ivk1ZUmiBrRHxNS6VomQNXE8a7n/HscwWAHYMVYyWow=
Subject key identifier: 06:B2:21:CF:62:87:FE:F3:38:58:8A:B6:37:9D:E9:57:DD:5C:27:8E
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 01999AE6D60B738D69CA0CD89F8E631F7164
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/BrIhz2KH_vM4WIq2N53pV91cJ44.roa
Signing time: Tue 30 Sep 2025 13:54:03 +0000
ROA not before: Tue 30 Sep 2025 13:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214466
IP address blocks: 2a14:9400::/29 maxlen: 29
2a14:9400:230::/48 maxlen: 48
2a14:9400:1337::/48 maxlen: 48
2a14:9400:2000::/36 maxlen: 36
2a14:9400:3000::/36 maxlen: 36
2a14:9400:4000::/36 maxlen: 36
2a14:9400:5000::/36 maxlen: 36
2a14:9400:6000::/36 maxlen: 36
2a14:9400:7000::/36 maxlen: 36
2a14:9400:8000::/36 maxlen: 36
2a14:9400:9000::/36 maxlen: 36
2a14:9400:a000::/36 maxlen: 36
2a14:9400:b000::/36 maxlen: 36
2a14:9400:c000::/36 maxlen: 36
2a14:9400:d000::/36 maxlen: 36
2a14:9400:e000::/36 maxlen: 36
2a14:9400:f000::/36 maxlen: 36
2a14:9401::/36 maxlen: 36
2a14:9401:1000::/36 maxlen: 36
2a14:9401:3000::/36 maxlen: 36
2a14:9401:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:e6:d6:0b:73:8d:69:ca:0c:d8:9f:8e:63:1f:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Sep 30 13:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b221cf6287fef338588ab6379de957dd5c278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:bf:0a:c6:2d:ab:df:b8:2b:b3:32:c3:3d:
7b:28:ef:0d:b7:cc:36:e3:ae:b0:40:29:a1:b7:5e:
35:e3:53:21:e3:8c:4d:0a:ef:f1:39:cc:1a:af:ad:
26:71:45:85:89:6b:11:a1:2c:9e:0c:7b:30:1e:06:
55:3b:c9:21:e7:60:2e:b0:4c:94:ac:bc:4b:2e:d0:
2c:8a:88:69:b8:95:3a:75:fb:73:d5:88:02:03:76:
b6:e1:5f:b5:4f:9a:2a:e4:1d:52:f1:87:a3:53:1a:
fd:50:0e:35:37:20:3f:35:47:4b:6a:37:28:17:a5:
28:ff:63:12:2a:0c:59:70:ec:41:4e:0e:cd:73:e9:
e1:b2:40:e3:7d:63:95:83:0b:71:10:72:7b:37:b7:
d4:55:f9:dd:79:05:55:66:aa:bd:6b:e8:17:76:28:
63:5d:c5:83:c4:f4:d1:45:49:03:e6:34:da:f4:1d:
17:7c:cb:46:89:15:fa:ff:5b:bb:54:53:0b:2e:1d:
ee:02:11:f4:93:2f:02:43:28:18:43:2b:48:63:cd:
83:9a:64:5d:5b:4c:88:ce:4d:7e:84:f9:cb:64:5d:
20:f2:ac:32:d3:6b:d8:a3:82:f1:af:9f:17:54:13:
69:51:de:ea:8d:6a:b3:be:98:75:d7:f2:26:e2:63:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:21:CF:62:87:FE:F3:38:58:8A:B6:37:9D:E9:57:DD:5C:27:8E
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/BrIhz2KH_vM4WIq2N53pV91cJ44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400::/29
Signature Algorithm: sha256WithRSAEncryption
34:c3:56:ee:ac:ec:45:36:b5:73:f9:5c:8b:6a:39:b1:7f:6f:
62:61:79:5b:ef:a0:6d:b4:8b:73:49:64:a3:66:c6:07:54:a5:
f4:5f:b4:f2:f2:49:24:e9:24:4b:cb:6c:78:25:39:2b:c7:0f:
62:af:47:bb:77:7e:73:d8:fd:02:2d:01:bd:26:b8:92:63:d7:
a4:b0:2c:8c:64:6a:8c:5d:20:e8:03:34:1b:2b:14:e6:7a:1a:
4c:9a:0d:8b:23:49:b2:69:c2:e6:86:6d:4d:01:93:ed:1c:aa:
aa:43:92:e8:f9:d7:73:0b:11:47:e2:59:c7:a6:15:f4:e1:42:
5e:73:a8:a8:1b:8b:1c:f2:ec:94:01:69:c3:be:a9:2c:e8:2c:
b0:a8:95:cf:07:11:09:50:7c:2e:88:19:53:bd:19:0d:10:1d:
20:6f:19:6a:af:b9:3e:73:12:9b:32:b7:11:5d:c3:67:e6:ad:
b3:1f:5c:60:ac:48:02:fd:fb:8f:5f:2f:a6:6b:8d:ec:00:f9:
c3:a0:8b:e8:8d:0d:b2:aa:73:20:4c:74:33:96:20:42:74:a7:
ec:8c:dc:fc:92:5f:74:11:9f:c8:d2:0a:8f:9d:18:99:b9:11:
32:2e:73:6b:95:c5:a2:24:de:f6:8c:d3:e4:5e:ee:3c:f6:16:
ed:bc:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:30:37 2025 by rpki-client